Disable Client Computer Printing Over both HTTP and HTTPS using Intune

Key Takeaways:

Helps reduce potential data leakage risks and strengthens endpoint security
Ensuring centralized management across enrolled Windows devices
Aligns with Zero Trust principles
Ensuring that device capabilities are tightly controlled and monitored

Let’s discuss Disable Client Computer Printing Over both HTTP and HTTPS using Intune. This is a security and networking configuration that dictates whether a Windows device can communicate with a printer using the Internet Printing Protocol (IPP) over an HTTP connection.

Table of Contents

By enabling this policy, admins can prevent the prevents the computer from sending print jobs or receiving printer status updates via HTTP/HTTPS. The computer will be restricted to traditional local printing methods (like USB) or standard network printing protocols (like RPC/SMB or JetDirect/Port 9100).

How to Start Policy Creation

By sign in with your Credentials an admin can easily configure Printing Over both HTTP and HTTPS policy with Microsoft Intune. After Sign in Go to Devices > Configuration >+ Create > +New Policy.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.1 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.1

Selecting Platform and Profile Type

Profile creation is the necessary step that helps you to assign the policy to appropriate platform and Profile. Here I would like to configure the policy to Windows 10 and later platform and settings catalog profile. Then click on the Create button.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.2 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.2

Basic Tab for Name and Description

Naming the policy is the primary step that help admins to identify the policy later. This is important and necessary step that allows you to know the purpose of the policy. Here is Name is mandatory and description is optional. After adding this click on the Next button.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.3 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.3

Configure Printing Over HTTP

With Settings Picker, you can use the Configuration Settings Tab. On this tab, you can click on the +Add Settings hyperlink to get the Settings Picker. The settings picker shows huge number of settings. Here, I would like to select the settings by browsing by Category. I choose System. Then, I choose Administrative Templates > System > Internet Communication Management > Internet Communication settings. Then choose Turn off printing over HTTP .

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.4 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.4

Disable Printing Over HTTP

If you disable or don’t configure this policy setting, users can choose to print to Internet printers over HTTP. Click on the Next button to continue.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.5 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.5

Enable HTTP Over Printing

If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. Click on the Next button to continue.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.6 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.6

Scope Tags

With scope tags, you create a restriction to the visibility of the Printing Over HTTP. It helps to organise resources as well. Here, I would like to skip this section, because it is not mandatory. Click on the Next button.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.7 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.7

Assignments Tab for Selecting Group

To assign the policy to specific groups, you can use the Assignment Tab. Here I click, +Add groups option under Included groups. I choose a group from the list of groups and click on the Select button. Again, I click on the Select button to continue.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.8 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.8

Review + Create Tab

Before completing the policy creation, you can review each tab to avoid misconfiguration or policy failure. After verifying all the details, click on the Create Button. After creating the policy, you will get a success message.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.9 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.9

Monitoring Status

The Monitoring Status page shows whether the policy has succeeded or not. To quickly configure the policy and take advantage of the policy sync the assigned device on Company Portal. Open the Intune Portal. Go to Devices > Configuration > Search for the Policy. Here, the policy shows as successful.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.10 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.10

Event Viewer Details

Event Viewer helps you check the client side and verify the policy status. Open the Client device and open the Event Viewer. Go to Start > Event Viewer. Navigate to Logs: In the left pane, go to Application and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin.

Event Viewer Details
MDM PolicyManager: Set policy string, Policy: (DiablePrintingOverHTTP), Area: (Connectivity), EnrollmentID requesting merge: (EB427D85-802F-46D9-A3E2-D5B414587F63), Current User: (Device), String: (), Enrollment Type: (0x6), Scope: (0x0).

Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Table.1

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.11 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.11

Removing the Assigned Group from Printing Over both HTTP and HTTPS Settings

If you want to remove the Assigned group from the policy, it is possible from the Intune Portal. To do this, open the Policy on Intune Portal and edit the Assignments tab and the Remove Policy.

To get more detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.12 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.12

How to Delete Printing Over both HTTP and HTTPS

You can easily delete the Policy from the Intune Portal. From the Configuration section, you can delete the policy. It will completely remove it from the client devices.

For detailed information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.13 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.13

Windows CSP Details

This policy setting specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet.

Disable Client Computer Printing Over both HTTP and HTTPS using Intune - Fig.14 — Disable Client Computer Printing Over both HTTP and HTTPS using Intune – Fig.14

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community  and WhatsApp Channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

View all posts

Disable Client Computer Printing Over both HTTP and HTTPS using Intune

Key Takeaways:

Table of Contents